mcp-sqlite-tools

The server implements robust security features including comprehensive input validation (Valibot), strict query classification (separating read-only, write, and schema operations), and path validation to prevent directory traversal attacks. It supports configurable path restrictions and uses parameterized queries to mitigate SQL injection. Resources are gracefully cleaned up on shutdown, and transaction safety is built-in. No direct 'eval' or other highly dangerous dynamic code execution patterns were identified. Its local nature, combined with these protections, makes it generally safe, provided the host environment is secure and configurations like `SQLITE_ALLOW_ABSOLUTE_PATHS` are managed carefully.